User Guide. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access. SDMCom012 and up Standard 06.

Transcription

1 DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide SDMCom012 and up Standard August 1999

2

3 DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide Publication number: Product release: SDMCom012 and up Document release: Standard Date: August 1999 Copyright 1997, 1998, 1999 Nortel Networks, All Rights Reserved NORTEL NETWORKS CONFIDENTIAL: The information contained in this document is the property of Northern Telecom. Except as specifically authorized in writing by Northern Telecom, the holder of this document shall keep the information contained herein confidential and shall protect same in whole or in part from disclosure and dissemination to third parties and use same for evaluation, operation, and maintenance purposes only. Information subject to change without notice DMS, DMS-100, DMS SuperNode, SuperNode, and MAP are trademarks of Northern Telecom. UNIX is a trademark licensed exclusively through X/Open Company Ltd. HP-UX is a trademark of Hewlett-Packard Company. OSF DCE is a trademark of Open Software Foundation Inc. SUN, SPARC, and Solaris are trademarks of SUN Microsystems, Inc. VT100 is a trademark of Digital Equipment Corporation.

4

5 Publication history iii August 1999 SDMCom012 and up. Standard Upissued for SDMCom12 for changes made to the installation procedures. February 1999 SDMCom011 and up. Standard December 1998 SDMCom010 and up. Standard Upissued to resolve cross references. October 1998 April 1998 SDMCom010 and up. Standard Upissued for SDM10. Removed references to ASCII Terminal Access. Changed NTP middle layer number back to the one used in SDMN0009. SDMCom009 and up. Standard Upissued to add installation steps for DCE tools in the Installing client common resources and DCE tools software procedure. Removed procedure Creating ERA schema types. Updated index. February 1998 SDMCom009 and up. Standard Upversioned for SDM_09 release. February 1998 SDMComF08 and up. Standard Upissued to add the option of viewing the ETA application in a bigger font. October 1997 August 1997 SDMComF08 and up. Standard Upissued to add flowcharts in chapters 2 and 3. SDMComF07 and up. Standard Upissued to add information on firewalls and port restrictions. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

6 iv May 1997 SDMComF07. Preliminary First release of this document Standard August 1999

7 Contents v About this document ix 1 Understanding ETA 1-1 Overview 1-1 How the ETA application relates to the SDM 1-2 DCE login 1-2 Enhanced Terminal Access architecture 1-2 ETA client 1-3 ETA server 1-3 DCE security server 1-3 SDM session 1-3 CI/MAP session ETA server software installation and configuration 2-1 Limitations and restrictions 2-2 Prerequisites 2-2 Compiling a list of server software filesets 2-3 Instructions for batch installation of SDM application software 2-3 ETA fileset descriptions 2-3 Installing the server application software on the SDM server using SWIM 2-3 SDM server software package 2-4 Installing the server software using SWIM 2-4 Configuring the server application software using SWIM 2-8 Configuring the application software using SWIM 2-9 Preparing the DCE for the application software 2-9 Starting the ETA server on the SDM 2-13 Removing an ETA server ETA client software installation and configuration 3-1 Limitations and restrictions 3-2 Prerequisites 3-3 Compiling a list of client software filesets 3-3 Instructions for batch installation of SDM application software 3-3 ETA fileset descriptions 3-3 Installing CIL on the client workstations 3-4 Application 3-4 Interval 3-4 DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

8 vi Contents Common procedures 3-4 Action 3-4 Installing the client software on the client workstation 3-7 Application 3-7 Interval 3-7 Common procedures 3-7 Action 3-7 Allowing ETA to operate across a firewall 3-10 Restricting the port range 3-10 Managing ETA extended registry attributes (ERA) 3-13 Adding ERA values for CM userids and passwords 3-13 Adding ERA values for the SDM userid 3-16 Getting ERA values for CM userids 3-18 Getting the ERA value for the SDM userid 3-20 Removing ERA values for CM userids and passwords 3-22 Removing the ERA value for the SDM userid ETA graphical user interface (GUI) 4-1 Selecting menu items 4-1 Using pull-down menus on the ETA main window 4-1 File pull-down menu 4-3 Action pull-down menu 4-3 Options pull-down menu 4-5 Help pull-down menu 4-6 Using the pull-down menus on the SDM and CI/MAP windows 4-7 File pull-down menu on the SDM and CI/MAP windows 4-8 Using and adjusting ETA session windows 4-9 Using multiple windows 4-9 Moving an ETA session window 4-10 Adjusting the size of an ETA session window 4-10 Copying and pasting text 4-10 Interpreting status icons 4-10 Operation-in-progress icon 4-10 Loss-of-connection icon 4-10 Using the on-line help utility 4-11 Interpreting information and error messages Using ETA 5-1 Starting the ETA client application 5-1 Error messages after logging in 5-6 Establishing an SDM session 5-7 Error message when establishing an SDM session 5-10 Establishing a CI/MAP session 5-11 Logging an SDM or CI/MAP session to an output file 5-14 Saving the current RMI or MAP display view 5-20 Changing CM passwords 5-24 Changing CM passwords in the DCE security database 5-24 Changing the CM password on the DMS-100 switch 5-30 Appendix A ETA status and error messages A Standard August 1999

9 Contents vii ETA status messages A-1 ETA error messages A-1 Index 7-1 DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

10

11 About this document ix This document contains information describing the SuperNode Data Manager (SDM) Enhanced Terminal Access (ETA) application, including procedures for installing the application. It is intended for system administrators and maintenance personnel. Organization of this document The following table describes the organization of this document. Chapter Title Description 1 Understanding ETA Describes the purpose of the ETA application and its architecture. 2 ETA server software installation and configuration 3 ETA client software installation and configuration Describes ETA server software installation and configuration procedures. Describes ETA client software installation and configuration procedures. 4 ETA graphical user interface (GUI) Describes the ETA GUI menus and options, and how to use the on-line help utility. 5 Using ETA Describes how to use ETA to establish an SDM or CI/MAP session, to log a session to a file, to save a current RMI or MAP view, and to change CM passwords. 6 Appendix: ETA status and error messages Lists and describes the ETA status and error messages,and what actions you must take to resolve problems. Checking the version and issue of this document The version and issue of the document are indicated by numbers, for example, The first two digits indicate the version. The version number increases each time the document is updated to support a new software release. For example, DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

12 x the first release of a document is In the next software release cycle, the first release of the same document is The second two digits indicate the issue. The issue number increases each time a document is revised but re-released in the same software release cycle. For example, the second release of a document in the same software release cycle would be To determine which version and issue of this document applies to the software in your office, check the release information in DMS-100 Family Guide to Northern Telecom Publications, References in this document The following documents are referred to in this document: SuperNode Data Manager Fault-tolerant User Guide, OSF ISBN , Release 1.1 (1995), Open Software Foundation, Inc., 11 Cambridge Center, Cambridge, MA Writing conventions This section describes the writing conventions used in this document. Input prompt An input prompt (> or #) indicates that the information that follows is a command: >LIST Commands and fixed parameters Commands and fixed parameters that are entered at a MAP terminal are shown in uppercase letters: >LIST ALL UNIX commands and fixed parameters that are entered at the SDM are shown in lowercase and uppercase letters, depending on the UNIX syntax: >echo $TERM Variables Variables that are entered at a MAP terminal are shown in lowercase letters: >TABLE table_name UNIX variables that are entered at the SDM are shown in italicized lowercase letters: Standard August 1999

13 xi >setenv TERM term_type The letters or numbers that the variable represents must be entered. Each variable is explained in a list that follows the command string. Responses Responses are shown in a different typeface: SDM 0 ManB DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

14

15 1 Understanding ETA 1-1 Overview The ETA application provides secure remote access to the DMS SuperNode Data Manager (SDM) across the operating company s transmission control protocol/internet protocol (TCP/IP) wide area network (WAN). From a graphic user interface (GUI) running on a remote client workstation, ETA provides multiple access to the following: SDM programs that have a command-line interface, such as the SDM Remote Maintenance Interface (RMI) SDM UNIX shells the computing module (CM) command interpreter (CI) maintenance and administration position (MAP) terminal sessions ETA uses the SDM remote GUI framework to communicate between the GUI client and the SDM in a secure environment. During a telnet session, userids and passwords are passed freely across the network. ETA uses Distributed Computing Environment (DCE) security servers to validate users. The system only gives access to valid users, based on the limitations that are configured in each user s profile. The authentication process ensures a secure operating environment. The main features of the ETA application are as follows: only a single login userid and passwords entered once per shift when the workstation session starts userids and passwords that correspond to a DCE security account automatic login from the client workstation to the CI/MAP terminal sessions, when required automatic login from the client workstation to the SDM, when required userids and passwords encrypted DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

16 1-2 Understanding ETA How the ETA application relates to the SDM The SDM is the Nortel Networks operations, administration, and maintenance (OA&M) processing complex for the DMS SuperNode switch. The SDM is a high-performance UNIX computing platform and software applications environment that allows operating companies to operate, administer, maintain, and provision DMS SuperNode switch components and services. The SDM supports the ETA application, which provides remote and secure access to the SDM and the CM using DCE security servers. ETA consists of a client program running on a remote machine, and a server running on the SDM. Note: Refer to the SuperNode Data Manager Fault-tolerant User Guide, for more information about the DCE. DCE login The DCE login process consists of two components the DCE principal (userid) and password. Both are entered once daily or for each work session. The method and frequency for logging on to the DCE depends on how the client workstation is configured. It can be configured in one of three ways: 1. If integrated DCE login is being used, then the DCE login session occurs when you log in to UNIX at the beginning of the day. 2. If integrated DCE login is not being used, but a DCE login command is included in the user s login profile, DCE authentication occurs once per shift. 3. If the client workstation does not use DCE login, and the ETA tool is started without logging in to DCE, the ETA client displays a dialog box that asks for the user s DCE principal name and password each time the ETA client is started. Note: Login information may expire after a few hours depending on how the DCE security server is configured. Refresh your login by entering your password. If you are using the ETA client, you are prompted for the password. After you have logged in to DCE, you may start one or more SDM sessions, and one or more CI/MAP sessions depending on the configuration of the your profile. Enhanced Terminal Access architecture The ETA application consists of three components the ETA client, the ETA server, and the client user profiles that are stored in the DCE security server. ETA provides a remote client program that provides windows where character-mode commands are invoked for the SDM on the network. The ETA client runs on a UNIX workstation that interconnects securely with an ETA server on the SDM where the command is either executed or passed on to the CM for execution Standard August 1999

17 Understanding ETA 1-3 ETA client The ETA client runs on a remote workstation. Together, with the ETA server on the SDM, the ETA client provides secure terminal access to the SDM and the CI/MAP terminal sessions. The ETA client operates with SDMN0008, SDMN0009, and SDMN0010 servers. The input and output data is displayed in a dialog box. The following UNIX platforms support the ETA client: Hewlett-Packard 700/800 series workstations running the HP-UX operating system (or higher) with year 2000 enhancements SUN SPARC workstations running the Solaris 2.4 operating system (or higher) with year 2000 enhancements SUN SPARC workstations running the year 2000 compliant Solaris 2.6 operating system (or higher) ETA server Each SDM has one ETA server. The ETA server is used for terminal sessions from the remote ETA clients. The ETA server supports up to 64 SDM sessions. It does not restrict the number of CI/MAP sessions. In practice, however, approximately 50 CI/MAP sessions are available. The actual number depends on the number of TCP sessions that are used by other services on the DMS switch. The number of TCP sessions permitted is configured in Table IPHOST. DCE security server The DCE security server contains a database or registry that stores account information on all ETA client users. The DCE security server informs the ETA server of the SDM userid (root or maint) of a user, and their CM userids and passwords. SDM session The first step in establishing an SDM session is to log in to DCE. When you log in to DCE, your DCE principal name and password are sent from the ETA client to the DCE security server for authentication. The ETA client then obtains a list of available SDMs from the DCE cell directory server. This list is displayed in the Enhanced Terminal Access window. After you select Access SDM, the ETA client uses remote procedure call (RPC) to send a request to the ETA server to ask for secure access to the SDM. The ETA client sends its IP address and port number to the ETA server, and information on the ETA client, including its principal name. A TCP/IP connection is then established between the ETA client and server. The ETA server obtains your SDM userid from the DCE security server. The SDM userid is either root or maintenance (maint). The ETA server then obtains your SDM userid profile from the SDM file, /etc/passwd. The profile DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

18 1-4 Understanding ETA information includes the root or maint password, the group ID, and the preferred shell. Depending on your profile, you will either see a UNIX shell or an SDM program, such as Remote Maintenance Interface (RMI). Before the SDM program starts, the ETA server sets your home directory, and your DCE authentication environment. Figure 1-1 Steps in an SDM session Workstation ETA client 2. List of availablesdms obtained DCE Cell directory server 4. TCP/IP connection established between ETA client and ETA server 1. DCE login authenticated DCE security server Network 3. RPC made to ETA server 5. ETA server gets SDM userid from DCE security server SDM ETA server SDM session 7. UNIX shell or SDM program started 6. SDM userid profile obtained from /etc/passwd file /etc/passwd CI/MAP session The first step in establishing a CI/MAP session is to log into the DCE. When you log into the DCE, your DCE principal name and password are sent from the ETA client to the DCE security server for authentication. The ETA client Standard August 1999

19 Understanding ETA 1-5 then gets a list of available SDMs from the DCE cell directory server. This list is displayed in the Enhanced Terminal Access window. After you select Access CI/MAP, the ETA client uses remote procedure call (RPC) to send a request to the ETA server asking for secure access to a CI/MAP terminal sessions. The ETA client sends its IP address and port number to the ETA server, and information on the ETA client, including its principal name. A TCP/IP connection is then established between the ETA client and server. The ETA server obtains one or more CM userids and passwords from the DCE security server. The ETA server then starts a telnet client session between the SDM and the CM. There can only be one session for each CM userid and password. The ETA server sends an error message to the ETA client if all CM userids and passwords are in use. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

20 1-6 Understanding ETA Figure 1-2 Steps in a CI/MAP session Workstation ETA client 2. List of available SDMs obtained DCE Cell directory server 1. DCE login authenticated 4. TCP/IP connection established between ETA client and ETA server DCE security server Network 3. RPC made to ETA server 5. ETA server gets CM userid and password from DCE security server SDM ETA server Telnet client 6. ETA server starts telnet session between the SDM and the CI/MAP for the CM userid and password DMS switch CI/MAP session Telnet server Standard August 1999

21 2-1 2 ETA server software installation and configuration This chapter describes ETA server software installation and configuration procedures for the SuperNode Data Manager (SDM). You must have root user privileges to perform the installation procedures in this chapter. The SDM software packages contain both the ETA server and client software. The Software Inventory Manager (SWIM) feature allows you to install one or more application software packages on the SDM during one procedure. ATTENTION Nortel Networks recommends using the batch installation steps when instructed, to reduce the amount of time required to install SDM applications. You must complete the installation and configuration procedures in the order outlined in this chapter. This chapter discusses the following topics: Limitations and restrictions Prerequisites Compiling a list of server software filesets Installing the server application software on the SDM server using SWIM Configuring the server application software using SWIM Starting the ETA server on the SDM Removing an ETA server DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

22 2-2 ETA server software installation and configuration Limitations and restrictions The following limitations and restrictions apply to ETA: The SDM for the remote client workstation must be configured in the Distributed Computing Environment (DCE) cell before installing ETA software. For information on DCE, refer to the DMS-100 Family SuperNode Data Manager Fault-tolerant User Guide, To access an SDM running the SDMN0008 software release of ETA, all SDMN0008 and SDMN0009 defined DCE principal names must be updated. Use the software in SDMN009.3 release or later. For information on updating DCE principal names, see the DMS-100 Family SuperNode Data Manager Fault-tolerant User Guide, Prerequisites The following are prerequisites for installing the server software: installation of the SDM platform maintenance software root and maintenance (maint) access to the SDM cell_admin or sdm_admin privileges for the DCE cell DCE account with administrative privileges ATTENTION If the sdm_admin account you are using to perform this procedure does not exist, you can use the cell_admin account instead. You also can exit the procedure, and proceed to the DCE Creating a DCE user procedure to create an sdm_admin account. Return to this procedure after you have created an sdm_admin account. Both sdm_admin and cell_admin DCE account have the required privileges to make changes to the DCE cell. However, the sdm_admin account functions as a sub-administrator account with limited privileges. The purpose of an sdm_admin account is to perform administrative tasks that are related to the SDM within the DCE cell. The sub-administrator account requires the following privileges: the ability to create accounts the ability to add permission for the SDM server organization the ability to add permission for the sdm-servers-using-cds group the ability to insert and modify the permissions for the access control list (ACL) on the /.:/subsys/nt/sdmcds directory Standard August 1999

23 Compiling a list of server software filesets ETA server software installation and configuration 2-3 ATTENTION Nortel Networks recommends using the batch installation steps in this section to reduce the amount of time required to install SDM applications. Instructions for batch installation of SDM application software You must compile a list of software filesets for each application you wish to install or upgrade. Before beginning the installation procedures, refer to the user guide of each application for a list of filesets. ETA fileset descriptions Before you begin the installation procedure of ETA, you must record the names of the server filesets. You must refer to this information during the installation procedures in this chapter. ETA application fileset name Record the application fileset name. The system displays the Enhanced Terminal Application fileset in one of the following forms, depending on the filter view you use: SDM_ETA.eta (name view) Enhanced Terminal Access (description view) Note 1: The filter view command on the SWIM main menu allows you to change the way the system displays the filesets. Use the filter view to toggle between the fileset name view and the fileset description view. Note 2: If you wish to install other applications at this time, refer to the fileset descriptions in the respective user guides. Once you have recorded the fileset information, you can refer to the user guide of your other SDM applications for fileset information. If you have completed the list of filesets for all of the applications you wish to install, proceed to the procedure, Installing the server application software on the SDM server using SWIM on page 3 in this chapter. Installing the server application software on the SDM server using SWIM The following section describes how to install the SDM server software application using SWIM. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

24 2-4 ETA server software installation and configuration SDM server software package Use the following procedure to install a software install image from a digital audio tape (DAT). This procedure applies to an initial installation of the SDM server software only. You must have root user access to the SDM to perform this procedure. ATTENTION Verify the SDM is configured in the DCE cell before performing this procedure. Refer to the DMS-100 Family SuperNode Data Manager Fault-tolerant User Guide, for a detailed procedure to configure an SDM in a DCE cell. Installing the server software using SWIM The SWIM package is part of the SDMPL010 base software release. SWIM provides the user interface (UI) for local SDM software installation and maintenance. You can access SWIM from the SDM maintenance interface. For more information on SWIM, refer to the DMS-100 Family SuperNode Data Manager Fault-tolerant User Guide. ATTENTION Before you can perform an installation using SWIM, you must have the SDM base software installed on the SDM. ATTENTION Nortel Networks recommends that you use the batch installation steps in this section to reduce the amount of time required to install SDM applications. The following flowchart summarizes the installation procedures for the application software Standard August 1999

25 ETA server software installation and configuration 2-5 Figure 2-1 Installing the server application software on the SDM using SWIM This flowchart summarizes the procedure. Use the instructions that follow this flowchart to perform the procedure. Log in to the SDM as the root user Select the source device Select the application fileset Select another application fileset? Y N Apply the fileset(s) End DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

26 2-6 ETA server software installation and configuration Procedure 2-1 Installing the application software on the SDM using SWIM At the local or remote VT100 console 1 Log into the SDM as root user. 2 Determine whether you are installing the software image using the tape, or the disk. If Do you are using the tape step 3 you are using the disk step 5 At the SDM 3 Insert the tape containing the SDM application packages into the SDM tape drive. Figure 2.2 shows how to set the tape into the DAT drive in domain 0 (slot 2). Figure 2-2 Inserting the tape into the DAT drive in domain 0 (slot 2) Standard August 1999

27 ETA server software installation and configuration 2-7 At the local or remote VT100 console 4 Access the SDM maintenance interface and select the tape source by typing #sdmmtc apply n where n is the domain where you have inserted the tape. If you inserted the tape into the tape drive in slot 2 (domain 0) you inserted the tape into the tape drive in slot 13 (domain 1) Do sdmmtc apply 0, and proceed to step 6. sdmmtc apply 1, and proceed to step 6. 5 Access the SDM maintenance interface, and select the source by typing #sdmmtc apply directory where directory is the name of the directory for the disk. 6 The system displays a list of filesets that are available on the tape drive. Each fileset has an identification number shown in the column under the number symbol. Example response of the Source menu level: Source Device: Tape drive on the main chassis slot 2 # Fileset Description Current Available 1 Client Common Resources i 2 Log Delivery Service i 3 Platform Maintenance i 4 OM Access Service i 5 Table Access Service i 6 Enhanced Terminal Access NA i 7 Installationg & Upgrade Tools i 8 Installation & Upgrade Lists i 9 Secure File Transfer NA i 10 Exception Reporting NA i Note 1: You can use the Up and Down commands to view additional filesets if the list extends beyond one screen. You can also use the Filter command to shorten the list. Note 2: When shown in the fileset list, install fileset images appear with a letter i to distinguish them from corrective content images. If you apply the install image, the system removes all archived versions of that fileset from the SDM hard disk. For more information on the Apply command menu, refer to the SuperNode Data Manager Fault-tolerant User Guide. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

28 2-8 ETA server software installation and configuration 7 Select the ETA application fileset that you wish to install. If necessary, refer to the list of filesets that you recorded in the previous section titled Compiling a list of server software filesets. To select the application fileset, type >select n where 8 n is the identification number listed next to the ETA fileset shown in the column under the number symbol (#) in the SWIM Apply level. In the example response shown in step 6, the identification number for Enhanced Terminal Access is 6, Secure File Transfer is 9, and Exception Reporting is10. After you have selected a fileset, the system highlights the entire fileset on the terminal. The system displays the total number of selected filesets on the top right corner of the SDM maintenance interface. ATTENTION Nortel Networks recommends using the batch installation steps in this section to reduce the amount of time required to install SDM applications. Repeat step 7 for any other application filesets that you wish to install. When you have selected the filesets you wish to install, go to the next step. 9 Apply the selected software fileset(s) by typing >apply Note: The system checks for warnings or errors before it exercises the apply command. If you have selected any filesets whose matching filesets require installation, the system generates a warning message. The warning message indicates that the SDM will apply the matching filesets even though you have not selected them. 10 Exit the SDM maintenance interface by typing >quit all 11 You have completed this procedure.. Verifythe SDM has configured the software for each application you installed. If the SDM did not configure the software for the application, you must configure the software manually. Refer to the procedure Configuring the server application software using SWIM. Configuring the server application software using SWIM The following section describes how to configure the server application software using SWIM Standard August 1999

29 ETA server software installation and configuration 2-9 Configuring the application software using SWIM The SWIM package is part of the SDMN0010 base software release. SWIM provides the UI for local SDM software installation and maintenance. You can access SWIM from the RMI. For more information on SWIM, see the SuperNode Data Manager Fault-tolerant User Guide, ATTENTION Before you can perform an installation using SWIM, you must have the SDM base software installed on the SDM. Preparing the DCE for the application software You must have a DCE account with administrative privileges to add application servers, such as ETA, Exception Reporting, and Secure File Transfer. ATTENTION If you use the sdm_admin account to perform this procedure, and the sdm_admin account does not exist, you can use the cell_admin account instead. You also can exit the procedure, and proceed to the Creating a DCE user procedure to create an sdm_admin account. Return to this procedure after you have created an sdm_admin account. CAUTION Risk of revealing the administrative user password If you use telnet to access the SDM remotely, and use the default cell_admin master administrator account to add the application server, the system sends the password of the administrative user in clear text across the network. To prevent this potential security risk, Nortel Networks recommends that you execute the command from a terminal attached to the SDM console port. Both the sdm_admin and cell_admin accounts have the required privileges to make changes ot the DCE cell. However, the sdm_admin account functions as a subadministrator account with limited privileges. The sdm_admin account performs administrative tasks that are related to the SDM within the DCE cell. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

30 2-10 ETA server software installation and configuration The DCE administrator account can create a sub-administrator account with privileges to add only SDM servers. The sub-administrator account requires the following privileges: ability to create principals add permission for the SDM server organization add permission for the sdm-servers-using-cds group insert and modify access control list (ACL) permissions on the /.:/subsys/nt/sdm CDS directory The following flowchart summarizes the installation procedures for the application software. To complete the procedure for configuring the application software, perform the step-action procedures that follow the flowchart Standard August 1999

31 ETA server software installation and configuration 2-11 Figure 2-3 Summary of Configuring the server application software using SWIM This flowchart summarizes the procedure. Use the instructions that follow this flowchart to perform the procedure. Log into the SDM as root user 1 DCE configured? N End 2 Access the SDM maintenance interface Y DCE sdm_admin? N Enter the DCE admin name Access the Config menu level Press the Enter key Y Execute the unconfigured scripts Enter the DCE admin password 1 Exit the SDM maintenance interface Logout from the SDM (optional) 2 DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

32 2-12 ETA server software installation and configuration Procedure 2-2 Configuring the server application software using SWIM At the SDM: 1 Log into the SDM as the root user. 2 Access the SDM maintenance interface by typing #sdmmtc The system displays the top menu level of the RMI. 3 Select the Config option in the SWIM menu by typing >config The system displays the Config menu that lists the filesets available for installation. Example response: # Fileset Description Status 1 Enhanced Terminal Access Unconfigured 2 Secure File Transfer Secure and Normal FTP Access 3 Exception Reporting Configured 4 Execute the unconfigured interactive configuration scripts by typing >config n where n is the number of the fileset you want to configure. 5 If you have commissioned DCE, the following prompt appears: Please enter the DCE administrator id: [sdm_admin] If Do DCE is not commissioned Step 6 DCE is commissioned Step 7 6 Press the Enter key. The system returns to the SDM maintenance interface screen. Go to step The system prompts you to enter a DCE administrator name. To accept the default DCE account (sdm_admin), press the Enter key, or enter another DCE administrator account. Example response: Enter the password for the DCE administrator sdm_admin: Note: You can also type another DCE account with administrative privileges (cell_admin), as described at the beginning of this procedure Standard August 1999

33 ETA server software installation and configuration At the Password: prompt, type >password and press the Enter key. The system configures the fileset and returns you to the Config menu level. where password is the password for the DCE administrator account name. 9 To exit from the SDM maintenance interface, type >quit all and press the Enter key. 10 To logout from the SDM, type #exit and press the Enter key. 11 You have completed this procedure. Starting the ETA server on the SDM The ETA client runs on any remote workstation that is configured in the DCE environment. Along with the ETA server on the SDM, the ETA client provides secure terminal access to the SDM and the MAP/CI terminal sessions. ETA clients cannot access the ETA application until you start the ETA server. Note: Before you begin this procedure, you must complete the installation procedures described in Installing the server application software on the SDM using SWIM. The following flowchart summarizes the procedure for starting the ETA server on the SDM. To complete the procedure for starting the ETA server on the SDM, perform the step-action procedures that follow the flowchart. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

34 2-14 ETA server software installation and configuration Figure 2-4 Summary of Starting the ETA server on the SDM Log into the SDM as the maint user This flowchart summarizes the procedure. Use the instructions that follow this flowchart to perform the procedure. Access the RMI Access the Appl menu level Start the ETA application End Standard August 1999

35 Procedure 2-3 Starting the ETA server on the SDM At the local or remote VT100 console ETA server software installation and configuration Log into the SDM as the maint user. 2 Access the RMI by typing maint:sdmmtc The system displays the top menu level of the RMI. 3 Access the application (Appl) menu level by typing >appl 4 The application menu lists the software packages installed on the SDM. Locate the Enhanced Terminal Access application. The version number is the same as the one displayed when the software was installed. Example of the application menu level # Package Description Version State 1 Table Access Service InSv 2 Operation Measurements InSv 3 Log Delivery Service InSv 4 Enhanced Terminal Access OffL 5 If Enhanced Terminal Access is not InSv, as shown in step 4, then it must be busied. Do this by typing >BSY eta_application_id where eta_application_id is the number corresponding to the Enhanced Terminal Access application. 6 Start the ETA application by typing >RTS eta_application_id where eta_application_id is the number shown for the ETA application. The example shows how the software packages are listed at the application menu level. To start the ETA application, in this example, you would type RTS 4 Note: The state of Enhanced Terminal Access shown at the application menu level of the RMI must be InSv. The Enhanced Terminal Access application is dependent on the DCE service on the SDM. If DCE is not in service, then Enhanced Terminal Access will be off-line. 7 You have completed this procedure. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

36 2-16 ETA server software installation and configuration Removing an ETA server Use this procedure to remove an ETA server. When the ETA application is not required on the SDM, you must release the resources that were claimed by the application server. You can also use this procedure to clear problems with an application server. It might be necessary to remove an ETA server from the DCE cell, then recreate the server using the config command under the SWIM menu. For information on server installation, refer to Installing the server application software on the SDM server using SWIM of this chapter. Problems with an application server include the following: the server identifies a mismatch resulting from a change to the switch Common Language Location Identifier (CLLI) the server cannot authenticate itself because of keytab problems. This may occur if the SDM data files are restored from a backup tape the server is unable to authenticate itself because its password has expired. This may occur if the server is OffL or ManB for an extended period of time. ATTENTION You can use either the sdm_admin or the cell_admin account to perform this procedure. If you use the default sdm_admin account to perform this procedure, and the default account does no exist, you can use the cell_admin account instead. You also can exit the procedure, and go to the DCE Creating a DCE user procedure to create an sdm_admin account. Return to this procedure after you have created an sdm_admin account. CAUTION Risk of revealing the administrative user password If you use telnet to access the SDM remotely, and use the default sdm_admin or cell_admin account to execute the DCE control program (dcecp) commands, the administrative user password is sent in clear text across the network. To prevent this potential security risk, Nortel Networks recommends that you execute the commands from a terminal attached to the SDM console port. To perform this procedure, you must have a DCE account with administrative privileges and root user access to the SDM Standard August 1999

37 Figure 2-5 Summary of Removing an ETA server ETA server software installation and configuration 2-17 Log in to the SDM as the root user Log in to DCE using admin the ID Enter the DCE password 1 Principals the same? N Remove the principal entries Y This flowchart summarizes the procedure. Use the instructions that follow this flowchart to perform the procedure. Invoke the DCE control program List the key tables in the SDM Delete the key table Remove the server principal ETA key table? N Exit the DCE control program List the key table principals 1 Y Log out from DCE End DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

38 2-18 ETA server software installation and configuration Procedure 2-4 Removing an ETA server At the local or remote VT100 console 1 Log into the SDM as the root user. 2 Log into DCE using the administrator userid by typing #dce_login DCE_admin_user where DCE_admin_user is the administrator userid. 3 Enter your DCE password by typing >password where password is the password for the administrator userid. 4 Invoke the DCE control program (dcecp) by typing >dcecp 5 List the key tables in the SDM by typing dcecp>key catalog -simplename 6 Determine whether the key table list contains a key table called eta. If Do the list contains the eta key table step 7 the list does not contain the eta step key table 11 step 12 7 List the principals that are supported by the key table by typing dcecp>key list eta 8 The list from the command executed in step 7 must contain entries that follow the format: /.../cell name/sdm/clli/principal name. where cell name is the cell in which the SDM reside. clli is the Common Language Location Identifier (CLLI) of the switch to which the SDM is connected. principal name is the userid of the server Standard August 1999

39 ETA server software installation and configuration Determine whether the principal name of all members in the list is the same, and that it corresponds to the eta-server. If Do all principal names are identical step 11 all principal names are not identical step Remove the entries for the principal in the key table by typing dcecp>key remove eta -member /.../cell_name/sdm/clli/eta-server where cell_name is the cell in which the SDM resides clli is the Common Language Location Identifier (CLLI) of the switch to which the SDM is connected. 11 Delete the key table by typing dcecp>key delete eta 12 Remove the principal for the SDM application server by typing dcecp>principal delete sdm/clli/eta-server where clli is the CLLI of the switch to which the SDM is connected. 13 Exit dcecp by typing dcecp>exit 14 Log out from DCE by typing >exit 15 You have completed this procedure. DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

40

41 3 ETA client software installation and configuration 3-1 This chapter describes the ETA application client software installation and configuration procedures. The SuperNode Data Manager (SDM) software packages contain both the server software and the client software. To install client software on the client workstation, you must first install the client installer and launcher (CIL) tool. This chapter provides the procedures to install CIL, and the ETA client software. ATTENTION Nortel Networks recommends using the batch installation steps when instructed, to reduce the amount of time required to install SDM applications. This chapter describes the following topics: Limitations and restrictions Compiling a list of client software filesets Installing CIL on the client workstation Installing the client software on the client workstation Allowing ETA to operate across a firewall DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

42 3-2 ETA client software installation and configuration Restricting the port ranges Managing ETA extended registry attributes (ERA). This section includes how to do the following: create ERA schema types add ERA values for computing module (CM) userids and passwords add an ERA value for an SDM userid get ERA values for CM userids and passwords get the ERA value for the SDM userid remove ERA values for CM userids and passwords remove the ERA value for the SDM userid Limitations and restrictions The following limitations and restrictions apply to ETA: The following UNIX platforms support the ETA client: Hewlett-Packard 700/800 series workstations running the HP-UX operating system, or higher, with year 2000 enhancements Sun SPARC workstations running the Solaris 2.4 operating system, or higher, with year 2000 enhancements Sun SPARC workstations running the year 2000 compliant Solaris 2.6 operating system, or higher. The workstation must use Open System Foundation (OSF) Distributed Computing Environment (DCE) version 1.1. The SDM for the remote client workstation must be configured in the DCE cell before installing ETA software. For information on DCE, refer to the SuperNode Data Manager Fault-tolerant User Guide To access an SDM running the SDMN0008 version of ETA, all SDMN0008- and SDMN0009-defined DCE principal names must be updated. Use the software in the SDMNM009.3 load or later. For information on updating DCE principal names, see the SuperNode Data Manager Fault-tolerant User Guide. NA007 CM software must be installed. The DISPLAY environment variable must always be configured, even if you are starting the interface from the console Standard August 1999

43 ETA client software installation and configuration 3-3 Prerequisites The following are prerequisites for installing the client software: installation of the SDM Base software must be completed root and maintenance (main) user class access to the SDM must be established cell_admin privileges for the DCE cell, or sdm_admin privileges for the applications DCE account with administrative privileges access to FTP on the SDM must be working an X Windows-based client machine where the client software is supported root user class access to the client machine is present access to uncompress and tar on the client machine Compiling a list of client software filesets ATTENTION Nortel Networks recommends using the batch installation steps in this section to reduce the amount of time required to install SDM applications. Instructions for batch installation of SDM application software You must compile a list of software filesets for each application you wish to install or upgrade. Before beginning the installation procedures, refer to the user guide of each application for a list of filesets. ETA fileset descriptions Before you begin the installation procedure of ETA, you must record the names of the client filesets. You must refer to this information during the installation procedures in this chapter. ETA client software fileset name Each client program is stored as a.tar.z file with the following structure: clientname-version.tar.z. where clientname is the client name of the application version is the version number for that client DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

44 3-4 ETA client software installation and configuration Record the following ETA client software fileset names: clientcommon-12.x.x.x.tar.z dcetools.tar.z eta_client-12.x.x.x.tar.z Once you have recorded the fileset information, you can, if necessary, refer to the user guide of other SDM applications for fileset information. If you have completed the list of filesets for all of the applications you wish to instal, proceed to the Installing CIL on the client workstation procedure. Installing CIL on the client workstations Application Use this procedure to install the CIL tool on the client workstation. You must know the following information to perform this procedure: the platform and operating system of the client workstations the internet protocol (IP) address and root password of the client workstations the root user password of the SDM the client software fileset names Repeat this procedure for every client workstation. ATTENTION Nortel Networks recommends using the batch installation steps in this section to reduce the amount of time required to install SDM applications on the client workstations. Interval Perform this procedure when you are installing SDM applications for the first time. Common procedures This procedure refers to the procedure Installing the client software on the client workstation in this chapter. Action The flowchart that follows provides a summary of this procedure. Use the instructions in the step action procedure that follows the flowchart to perform the routine maintenance procedure Standard August 1999

45 Figure 3-1 Summary of installing CIL on the client workstation ETA client software installation and configuration 3-5 Login to the workstation as the root user This flowchart summarizes the procedure. Use the instructions that follow this flowchart to perform the procedure. Y Is CIL for SDM12 on the workstation? N Change to tmp dir 2 1 Make CIL executable FTP to the SDM to download CIL Execute CIL Retrieve CIL 2 Proceed to the next procedure to install the application Quit the FTP program to the SDM 1 DMS-100 Family SuperNode Data Manager Enhanced Terminal Access User Guide

46 3-6 ETA client software installation and configuration Procedure 3-1 Installing CIL on the client workstation At the client workstation 1 CAUTION Risk of revealing the administrative user password If you use telnet to access the client workstation remotely, and use the default sdm_admin or cell_admin account to execute the DCE control program (dcecp) commands, the system sends the administrative user password in clear text across the network. To prevent this potential security risk, Nortel Networks recommends that you execute the commands from a terminal attached to the workstation console port. At the local or remote VT100 console, log in to the client workstation as the root user. 2 Determine whether the CIL tool for the SDMPL012 release exists on the client workstation. If CIL for SDM12 exists on the client workstation CIL for SDM12 does not exist on the client workstation Do step 10 step 3 3 Change to the temporary directory by typing, #cd /tmp Note: You can change to any directory if it is a directory where you can download new files. 4 Open a connection to an SDM which has at least software release SDMN0012 installed. Open an file transfer protocol (FTP) connection by typing, #ftp ip_address where ip_address is the IP address of the SDM. 5 Login to the SDM as an anonymous user by typing, Name: ftp 6 When the system asks you for a password, ignore the prompt and press the Enter key to continue the procedure Standard August 1999